Catch Themes

Products

ProductCVEsExploitedLatest
Catch Dark Mode1–Apr 4, 2025
Catch Duplicate Switcher1–Mar 3, 2025
Darcie1–May 4, 2023
Essential Widgets1–Dec 9, 2025

Exploited and recent CVEs

  • CVE-2025-67543 Medium 6.5 WordPress Essential Widgets plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-32154 High 7.5 WordPress Catch Dark Mode plugin <= 2.0.1 - Local File Inclusion vulnerability 1.0%
  • CVE-2025-23619 High 7.1 WordPress Catch Duplicate Switcher plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-25961 High 7.1 WordPress Darcie Theme <= 1.1.5 is vulnerable to Cross Site Scripting (XSS) 0.4%